Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
File: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft (raw, json)
Hash identifier: 0LVsEPLGg4LJ2aYDtri4vhja5bA16pgx5IbvLTv+ELQ=
Subject key identifier: 13:85:E1:6B:EB:0D:29:54:1B:44:7C:30:28:81:F2:2C:62:A0:7B:60
Authority key identifier: 34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
Certificate issuer: /CN=345eecab9570cf0affa81be748e9128f55e416c2
Certificate serial: 019A22F78AFD1F2C347E536773D5779E8F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
Manifest number: 0652
Signing time: Mon 27 Oct 2025 00:00:39 +0000
Manifest this update: Mon 27 Oct 2025 00:00:39 +0000
Manifest next update: Tue 28 Oct 2025 00:00:39 +0000
Files and hashes: 1: 1-lCQIu3wKSeUq2VrUD5tWenu5SY.roa (hash: uGVhG0epQ2wGofSbe1ShOYtQrordv9iVyPvHij3V4P4=)
2: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl (hash: T59L0rovE4MXOLBJSqKLs8jq1zExwf3DLbuYMDXgSZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:8a:fd:1f:2c:34:7e:53:67:73:d5:77:9e:8f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345eecab9570cf0affa81be748e9128f55e416c2
Validity
Not Before: Oct 27 00:00:39 2025 GMT
Not After : Oct 28 00:00:39 2025 GMT
Subject: CN=1385e16beb0d29541b447c302881f22c62a07b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:9f:42:d4:8d:2d:ac:e5:77:f6:61:d8:62:
81:fe:9b:f7:00:53:07:bc:20:de:c4:f7:d8:7c:80:
5a:05:0a:91:68:03:d4:37:e2:09:79:53:9e:4f:95:
a1:e6:75:56:25:a1:79:89:b3:f3:c6:a8:69:2d:1d:
73:09:35:51:88:07:39:85:83:09:f6:c1:39:4b:a9:
53:65:61:c8:84:a9:c5:21:20:b5:37:26:a2:1a:7d:
84:d8:97:ad:51:5b:d6:ae:14:41:a8:2c:14:4a:0d:
ef:df:d4:a3:f1:79:b2:be:d5:2c:d6:4c:c5:6c:71:
c0:d5:08:85:96:98:aa:68:ce:68:9b:e0:d9:08:64:
5d:bf:82:b6:46:b4:f9:0b:f0:14:b9:bd:cf:f9:5b:
5c:3a:4f:fa:97:b0:b3:6c:26:ce:bb:e8:06:61:6b:
c2:23:11:98:bc:8e:c2:6f:0c:5f:ea:62:78:af:58:
02:ab:67:23:bb:79:32:e5:09:ed:7a:3a:50:86:c4:
59:f9:a6:56:34:4c:f7:a4:e6:2e:6d:ef:b9:13:01:
12:3b:31:98:bc:06:0b:16:a9:94:62:07:6b:6a:ac:
bf:ba:78:4c:a6:24:c2:55:0e:54:e3:d5:73:6f:12:
60:e5:4d:8c:60:43:5a:c8:dd:f4:94:5d:5a:e1:fd:
a3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:85:E1:6B:EB:0D:29:54:1B:44:7C:30:28:81:F2:2C:62:A0:7B:60
X509v3 Authority Key Identifier:
keyid:34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ba:d3:1e:3c:31:5a:6e:f8:ae:0a:68:ef:66:9c:8c:f7:67:
5f:cc:aa:28:90:db:59:32:b3:67:b2:cc:2f:b4:46:b1:e5:3e:
f5:dc:f3:52:8c:3a:91:7a:d2:a1:0e:9c:2f:59:fd:2c:2a:6e:
c2:8d:66:5e:0f:03:4d:d5:65:ab:e2:d0:1d:ab:7b:2d:b0:da:
29:30:68:1b:7d:fd:1c:d1:7c:44:4e:e8:5f:a6:b2:b6:ba:5f:
f0:6f:92:ed:01:32:62:e5:c1:26:7c:45:b4:cd:4a:b3:38:28:
dc:59:9f:20:df:fd:bb:1b:ef:d4:de:d8:6e:fb:2b:c3:13:2d:
a8:90:f3:95:0f:51:05:b7:03:8a:b5:85:bd:c5:e1:dd:c5:94:
6c:59:ee:a7:d6:9b:a9:75:7d:c4:d5:15:36:2f:ff:3f:d7:8b:
94:95:19:d0:87:e4:dd:29:ea:d9:82:3a:ab:ef:ec:82:e5:23:
b2:c6:14:60:99:90:29:33:bd:16:eb:54:65:1a:bf:fc:ad:e8:
45:9d:ea:1d:36:79:4c:0c:a7:8c:a8:c4:ee:a1:2d:d5:ed:e5:
37:b0:07:ba:5b:d6:0d:e6:53:97:ba:3a:63:c9:84:9d:ec:0e:
d4:95:fc:5c:43:db:36:eb:36:6e:fd:14:e2:98:c2:2c:0e:bb:
7b:70:ac:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:31:11 2025 by rpki-client